This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  d4c2f83f8f6a12a9e635fbb50c8e85aea7e240af (commit)
       via  b54b8ffac75b29844fd1117fc088f9817d76e3e7 (commit)
       via  fd6594246e28b99d74abce87f0c515787805ea4d (commit)
       via  c55f33030fa31842f04fda06b22d5a7bb9831134 (commit)
      from  cd11a1209360be4f444a070709f902fb3334eabb (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit d4c2f83f8f6a12a9e635fbb50c8e85aea7e240af
Author: Jonathan Druart <jonathan.dru...@bugs.koha-community.org>
Date:   Wed Sep 14 09:20:01 2016 +0100

    Bug 16800: Fix XSS in additem.pl
    
    Signed-off-by: Katrin Fischer  <katrin.fisc...@bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <k...@bywatersolutions.com>
    (cherry picked from commit 9734726846f6fa652d88c8bc39c7b43595422465)
    Signed-off-by: Frédéric Demians <f.demi...@tamil.fr>
    (cherry picked from commit 5a4a65cdbbf2f6cabd5b0979e4c5e969eb66e0fb)
    Signed-off-by: Julian Maurice <julian.maur...@biblibre.com>

commit b54b8ffac75b29844fd1117fc088f9817d76e3e7
Author: Jonathan Druart <jonathan.dru...@bugs.koha-community.org>
Date:   Tue Aug 2 16:05:09 2016 +0100

    Bug 16800: Fix XSS in catalogue/*detail.tt - isbn
    
    Test plan:
    catalogue a bibliographic record with a isbn=
      </title><script>alert('XSS')</script>
    
    Go on the detail pages.
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <ch...@bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer  <katrin.fisc...@bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <k...@bywatersolutions.com>
    Signed-off-by: Frédéric Demians <f.demi...@tamil.fr>
    (cherry picked from commit 13705e51084f605a0e9fc686e7ee30350fb556e2)
    Signed-off-by: Julian Maurice <julian.maur...@biblibre.com>

commit fd6594246e28b99d74abce87f0c515787805ea4d
Author: Jonathan Druart <jonathan.dru...@bugs.koha-community.org>
Date:   Tue Aug 2 16:03:37 2016 +0100

    Bug 16800: Fix XSS in catalogue/*detail.tt - author
    
    Test plan:
    catalogue a bibliographic record with a author=
      </title><script>alert('XSS')</script>
    
    Go on the detail pages.
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <ch...@bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer  <katrin.fisc...@bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <k...@bywatersolutions.com>
    (cherry picked from commit 3169434cfa7295025e4ff5fea58f7e9730a96650)
    Signed-off-by: Frédéric Demians <f.demi...@tamil.fr>
    (cherry picked from commit 4ab091d3bfd2c6659320cbe80d35b805cff3aa4e)
    Signed-off-by: Julian Maurice <julian.maur...@biblibre.com>

commit c55f33030fa31842f04fda06b22d5a7bb9831134
Author: Jonathan Druart <jonathan.dru...@bugs.koha-community.org>
Date:   Tue Aug 2 16:02:07 2016 +0100

    Bug 16800: Fix XSS in catalogue/*detail.tt - title
    
    Test plan:
    catalogue a bibliographic record with a title=
      </title><script>alert('XSS')</script>
    
    Go on the detail pages.
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <ch...@bigballofwax.co.nz>
    
    This of course means that any html in the title will no longer be
    evaluated. :
    
    Signed-off-by: Katrin Fischer  <katrin.fisc...@bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <k...@bywatersolutions.com>
    (cherry picked from commit 515208d5ec308ade967efe04388bbedbf5f2b057)
    Signed-off-by: Frédéric Demians <f.demi...@tamil.fr>
    (cherry picked from commit c27216cce84fe07c962a8878be51025c9fe0aace)
    Signed-off-by: Julian Maurice <julian.maur...@biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 .../intranet-tmpl/prog/en/modules/catalogue/ISBDdetail.tt  |    2 +-
 .../intranet-tmpl/prog/en/modules/catalogue/MARCdetail.tt  |    2 +-
 .../intranet-tmpl/prog/en/modules/catalogue/detail.tt      |   12 ++++++------
 .../prog/en/modules/catalogue/labeledMARCdetail.tt         |    6 +++---
 .../intranet-tmpl/prog/en/modules/catalogue/moredetail.tt  |    6 +++---
 .../intranet-tmpl/prog/en/modules/cataloguing/additem.tt   |    6 +++---
 6 files changed, 17 insertions(+), 17 deletions(-)


hooks/post-receive
-- 
main Koha release repository
_______________________________________________
koha-commits mailing list
koha-commits@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-commits

Reply via email to